CVE-2024-40083

CRITICAL EPSS 38.4%

Published Oct 21, 20241y ago · Modified Jun 17, 20261w ago

9.6 CVSS 3.1

Critical

Published Oct 21, 2024 1y ago

Last Modified Jun 17, 2026 1w ago

Description

A Buffer Overflow vulnerabilty in the local_app_set_router_token function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to execute arbitrary code via sscanf reading the token and timezone JSON fields into a fixed-length buffer.

CVSS Details

Base Score

9.6

Exploitability

2.8

Impact

6.0

Vector string

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector Adjacent

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Changed

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

38.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-120

References 2

vilo.com http://vilo.com
github.com https://github.com/byu-cybersecurity-research/vilo/blob/main/vulns/CVE-2024-40083.md

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.